Albania: technology regulation at a glance

Framework: Law No. 66/2020 'On Financial Markets Based on Distributed Ledger Technology' (in force since Sept 2020), supervised jointly by the Albanian Financial Supervisory Authority (AMF/AFSA) and the National Agency for Information Society (AKSHI), with custody wallet providers additionally licensed by the Bank of Albania; a MiCA-aligned draft law 'On Crypto-Asset Markets' was approved by the Council of Ministers in 2026 and is pending adoption.

Crypto is legal in Albania and operates under a dedicated, in-force licensing regime (Law 66/2020) that covers token issuance (ICO/STO), DLT exchanges, agents, custody wallet providers and collective investment schemes. Supervision is split between the AMF and AKSHI, with the Bank of Albania licensing custodian wallet services; tax treatment is set by the 2023 Income Tax Law (15% capital gains). In 2026 Albania approved a draft 'On Crypto-Asset Markets' law to fully align its regime with the EU's MiCA regulation, which would replace Law 66/2020 once enacted.

Framework: Council of Ministers Decision No. 479/2024 (Methodology and Technical Standards for AI Use); Digital Agenda 2022-2026; Draft National AI Strategy, all non-binding and limited to the public sector. Law No. 124/2024 on Personal Data Protection (GDPR-aligned) is the primary binding instrument with indirect AI relevance.

Albania has no dedicated, binding AI law. Its AI governance rests on a 2024 Council of Ministers decision setting non-enforceable methodology and technical standards for public-sector AI use, a non-binding Digital Agenda 2022-2026, and a draft national AI strategy. As an EU candidate country since 2014, Albania is expected to progressively align with the EU AI Act through the accession process, but formal transposition is not anticipated before 2027.

Framework: Law No. 124/2024 'On Personal Data Protection' (in force 31 January 2025), supervised by the Commissioner for the Right to Information and Protection of Personal Data (IDP, idp.al)

Albania enacted Law No. 124/2024 on 19 December 2024, published in Official Gazette No. 9 on 17 January 2025 and in force from 31 January 2025, replacing the 2008 Law No. 9887. The new law is fully harmonised with the EU GDPR (Regulation 2016/679) and the Law Enforcement Directive (2016/680), introducing GDPR-equivalent rights, obligations, and sanctions. The independent supervisory authority is the Commissioner for the Right to Information and Protection of Personal Data (IDP), which has shifted to assertive enforcement with a marked increase in fines in early 2026.

Framework: Law 'On Payment Services' (PSD2-aligned); Regulation 59/2021 on licensing of Payment Institutions and Electronic Money Institutions; supervised by the Bank of Albania

Albania operates a comprehensive licensing regime for payment institutions and e-money institutions, grounded in a PSD2-aligned Law 'On Payment Services' and implemented through detailed Bank of Albania regulations. The country joined the SEPA geographical scope in November 2024 and issued its first open banking licence the same month, marking a significant step toward EU financial integration. An instant-payments infrastructure modelled on the Eurosystem's TIPS is under active development as of early 2025.

Framework: Law No. 79/2021 'On Aliens' (Ligji Nr. 79/2021 'Për të Huajt'), administered by the Albanian Migration Authority (Drejtoria e Përgjithshme e Policisë së Shtetit); procedures updated by Joint Instruction No. 196/2024 (in force 22 October 2024)

Albania established a dedicated 'Unique Permit for Digital Mobile Workers' under Law 79/2021, in force since May 2022. This single document combines a Type D long-stay visa with a residence and work-authorisation card, allowing remote workers employed by or contracting exclusively with foreign entities to live in Albania initially for one year, renewable up to five years. Applications are submitted fully online via the e-Albania / e-visa.al portal.

Framework: Audiovisual Media Act (as amended 2023 to cover video-sharing platforms), Law on Electronic Commerce, and Law on Electronic Communications (No. 54/2024), supervised by the Audiovisual Media Authority (AMA)

Albania has a partial online content regulation regime, relying on sector-specific laws rather than a comprehensive online safety statute. The 2023 amendment to the Audiovisual Media Act brought video-sharing platforms (VSPs) under the AMA's supervision, but no DSA-equivalent law is yet in force; the government has committed to full Digital Services Act approximation by end of 2026. A notable episode was a one-year TikTok ban (March 2025, February 2026) imposed by executive decree over child-safety concerns, which was widely circumvented via VPNs.

Framework: Law No. 25/2024 'On Cybersecurity' (in force April 2024), enforced by the National Cybersecurity Authority (AKSK/NCSA)

Albania enacted a standalone, comprehensive cybersecurity law (Law No. 25/2024) in April 2024, modelled closely on the EU NIS2 Directive and covering both critical and important information infrastructures across public and private sectors. The National Cybersecurity Authority (AKSK) serves as both the primary supervisory body and the National CSIRT, with power to classify infrastructure, supervise compliance, and impose administrative fines. The National Cybersecurity Strategy 2025-2030, approved in October 2025, further aligns Albania with EU (NIS2, eIDAS2, EUCC) and NATO standards.

Framework: Law No. 9901 of 14.04.2008 'On Entrepreneurs and Commercial Companies' (as amended) and Law No. 7764 of 02.11.1993 'On Foreign Investments', administered by the National Business Center (Qendra Kombëtare e Biznesit, QKB) via the e-Albania digital portal

Albania offers a highly open and streamlined business environment for foreigners, permitting 100% foreign ownership in nearly all sectors with no meaningful minimum capital requirement for standard LLCs. Registration is fully digital through the e-Albania portal and processed by the one-stop-shop National Business Center (QKB), which simultaneously issues the tax identification number (NIPT) and registers the entity with tax, social security, and labour authorities, typically within 1-5 business days. Foreign investors receive equal legal treatment with domestic investors under Law 7764.